Standard and Customized Reports

Auditing 6-3 snapshots and deltas in XML format. The audit engine also contains post-processors, which, based on the generated XML, populate the reporting tables with relevant data. To maintain high performance, by default the audit engine performs these tasks in an asynchronous and offline manner by using the underlying Java Messaging Service JMS provided by the application server. This section discusses the following topics: ■ Audit Levels ■ Tables Used for Storing Information About Auditors ■ Issuing Audit Messages

6.2.1 Audit Levels

As mentioned earlier in this chapter, When you install Oracle Identity Manager user profile auditing is enabled by default and the auditing level is set to Resource Form. If you change the auditing level, then you must run the GenerateSnapshot.sh script on UNIX or the GenerateSnapshot.bat script on Microsoft Windows. This script is in the IDM_HOMEserverbin directory. The script examines all users in Oracle Identity Manager database and generates new snapshots based on the new auditing level. You can configure the level of detail for auditing aspect of the auditing engine and specify the audit level as the value of the XL.UserProfileAuditDataCollection system property in the Advanced Administration. The supported audit levels are: ■ Process Task: Audits the entire user profile snapshot together with the resource lifecycle process. ■ Resource Form: Audits user record, role membership, resource provisioned, and any form data associated to the resource. ■ Resource: Audits the user record, role membership, and resource provisioning. ■ Membership: Only audits the user record and role membership. ■ Core: Only audits the user record. ■ None: No audit is stored. Note: If you change the auditing level, then you must run the GenerateSnapshot script before allowing users to access the system. See Also: System Properties in Oracle Identity Manager in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager for information about this system property Note: When you specify a particular audit level, all audit levels that are at a lower priority level are automatically enabled. For example, if you specify the Membership audit level, then the Core audit level is automatically enabled. Audit level specifications are case-sensitive. When you specify an audit level, ensure that you do not change the case uppercase and lowercase of the audit level.